In the Linux kernel, the following vulnerability has been resolved:
drm/xe/pf: Clear all LMTT pages on alloc
Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might leave some stale data that could either point to some other VFs allocations or even to the PF pages.
Explicitly clear all new LMTT page to avoid the risk that a malicious VF would try to exploit that gap.
While around add asserts to catch any undesired PTE overwrites and low-level debug traces to track LMTT PT life-cycle.
(cherry picked from commit 3fae6918a3e27cce20ded2551f863fb05d4bef8d)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-azure-devel | Dec 5, 2025 | Sep 22, 2025 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-xilinxUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fips | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub